Category: Technical How-to

AWS Transform custom runs an autonomous agent with shell access over your source code, using your AWS credentials. This post bounds it with three controls: a scoped trust allowlist, an execution identity separate from the one that authors, and a per-run agent-minute cap backed by an account budget.

AWS Elastic Beanstalk now joins your Windows Server instances to an Active Directory domain automatically at launch, before your application deploys, with no join scripts and no stored domain credentials. This walkthrough shows how to set it up, confirm the join, and see how Elastic Beanstalk reports a failed join without failing your deployment.

Learn how to connect AWS DevOps Agent investigation events to third-party tools such as Jira using Amazon EventBridge and AWS Lambda. This post walks through a deployable AWS CDK solution that automatically creates and updates Jira issues as an investigation progresses, and shows how to adapt the same pattern to ServiceNow, PagerDuty, and other tools.

Connect AWS DevOps Agent to your Amazon OpenSearch Service observability data using the Model Context Protocol (MCP), so an alert that fires at 2 AM triggers autonomous root cause investigation. Covers three MCP server hosting paths (self-managed on Amazon ECS, Amazon Bedrock AgentCore, or built-in OpenSearch 3.3+), plus alert routing and FGAC role mapping.

A redesigned checkout button is meant to lift sales. A longer cache time to live (TTL) is meant to cut backend load. But until you test a change against real production traffic, decisions come down to intuition and whoever argues hardest, not evidence. With AWS AppConfig experimentation, you can make data-driven calls instead: using A/B […]

Code review feedback is most valuable when it arrives early. A security vulnerability caught in a pull request saves hours. The same vulnerability caught in production costs days. But what if you could catch it before the code even leaves the developer’s machine – at the time of git commit? Git hooks run automatically at […]

AWS DevOps Agent investigates production incidents and proposes or applies fixes on your behalf, raising two questions for every operation and security review: what did the agent do, and how do you understand its impact? Learn how to build a durable, low-maintenance audit trail using the agent journal, Amazon EventBridge lifecycle events, and AWS CloudTrail.

Introduction Continuous improvement depends on experimentation. Teams know that the fastest path to better outcomes is to test changes against real user behavior, measure results, and iterate. In practice, sustaining that cycle is slow and costly because the overhead compounds with each attempt. Three barriers slow teams down: 1. Planning cost — Turning a proposed […]

AWS Health Planned Lifecycle Events signal when a managed service version is nearing end of standard support. Learn how to automate these upgrades end to end with AWS DevOps Agent and Kiro: detect the event, investigate the upgrade path, apply validated code changes, and open a pull request for human review.

Introduction Running workloads on Amazon Elastic Kubernetes Service (Amazon EKS) can involve managing failures like OOMKilled or IP exhaustion. Engineers must repeatedly collect pod logs, trace events, and check node logs—a process that slows at night/weekends, with critical data lost when pods are deleted or nodes become unhealthy. This collection phase is pure overhead on […]